For schools and districts

Student data privacy agreement

This is the standard agreement Forge Learning Technologies LLC (“we”) offers to schools and districts (“the school”) that assign Ethical AI Classroom to students or staff. Email learn@ethicalaiclassroom.com for a copy to sign. We will also review your district’s or state’s own data privacy agreement.

1. Purpose and ownership

We use student and staff information only to provide the learning service the school requested: accounts, course access, progress tracking, assessments, certificates, and school reporting. The school owns and controls the student information it provides. We do not sell student information, use it for targeted advertising, or build profiles for any purpose other than providing the service.

2. Information we receive

From the school: learner email addresses, and optionally learner type (student or faculty/staff), grade level, and graduation year. From learners as they use the service: the name they choose for their certificate, course enrollments, page and module progress, assessment answers and scores, certificates, and student age and permission choices. For teacher-led classroom lessons, we record when a teacher opened and completed a lesson; no student information is collected in classroom lessons. We also keep security and email-delivery records needed to operate the service.

3. Legal framework

For schools subject to the Family Educational Rights and Privacy Act (FERPA), we act as a school official with a legitimate educational interest, under the school’s direct control with respect to the use and maintenance of education records, and we do not re-disclose those records except as the school directs or the law requires. For students under 13, we rely on the school’s authorization to provide this educational service, as described in Federal Trade Commission guidance on the Children’s Online Privacy Protection Act (COPPA), and we use that information only for the school’s educational purposes. Where state student-privacy laws apply, we will work with the school to meet them.

4. No use for AI training

Ethical AI Classroom does not send student information to AI tools or use it to train AI models.

5. Service providers

We use a small number of service providers to run the service, each limited to its role:

• Cloudflare, for hosting, the database, and file storage.
• Resend, for delivering sign-in codes and course emails.
• Stripe, for card payments (purchaser and payment details only; no course progress or student work).
• Google, when a lesson includes an embedded YouTube video or Google Slides presentation, which load from Google when viewed.

We will tell the school about any new service provider that would receive student information.

6. Security

The service uses encrypted connections (HTTPS), passwordless sign-in with one-time codes, stored only as secure hashes, and restricted, logged administrator access. If we learn of unauthorized access to the school’s student information, we will notify the school without unreasonable delay and as required by applicable law, and cooperate with its response.

7. Access, correction, and deletion

The school may ask us to provide, correct, or delete its student information. We will act on deletion requests within 30 days, except for limited records we must keep: payment and tax records, certificate verification records, and security and audit logs. When an agreement ends, we will delete or return the school’s student information on request.

8. Related documents

See our privacy notice, terms of service, accessibility statement, and purchase-order terms.